Platform Engineer, Application Security

metr· Engineering & Research
Apply Now ↗
📍 BerkeleyEmployee💰 USD 328K–579K

About this role

About METR

We are a nonprofit research organization that develops scientific methods to assess AI capabilities, risks, and mitigations, with a specific focus on threats related to AI R&D automation and misalignment.

We believe it is robustly good for policymakers and civil society to have a clear understanding of risks from AI systems, and we are extremely excited to build a team of ambitious, excellent people to tackle one of the most important challenges of our time.

About the role

    METR’s mission of enabling transparency and coordination about the risks of frontier AI requires a high degree of trust from frontier AI labs, governments, and the public. As misalignment incidents become more extreme and confidential information about models and frontier AI labs becomes more valuable, we expect to be under increasingly intense pressure from external actors and internal agents. 

    METR is looking to expand the security expertise on our platform team. This would span application security in our evaluation platform, sandboxing agents and evaluations, cloud platform security, networking, access control for both people and agents, and securing our development environments and workflows. This role will have a large engineering component: expect to write and review code, fix vulnerabilities, and design and develop secure systems.

What this role looks like

  • Securing a unique attack surface. METR's evaluation infrastructure runs frontier AI agents, including early checkpoints of unreleased models, executing untrusted, model-generated code at scale on multi-day tasks. You will design and build the isolation, networking, and permission boundaries that contain evaluated agents. 

  • Remediation and hardening. You will find, triage, and fix vulnerabilities across our cloud infrastructure and access control systems.

  • Fixing known vulnerabilities in our codebase. This includes code reviews and resolving known vulnerabilities in our backlog.

  • Identity and access as a system. You will design and implement IAM policies, least-privilege access, and automated provisioning and access review for both people and agents.

  • Securing agentic systems. You will design and implement systems to monitor and control agents, making sure they can operate securely and with appropriate permissions and guardrails.

Required skills

  • 7+ years of experience working in security engineering, software development, or an adjacent field.

  • Production software engineering. You have experience building and operating backend or infrastructure in practice.

  • Cloud and container security. You have deep familiarity with AWS (especially non-trivial IAM), Kubernetes, and infrastructure-as-code environments.

  • Vulnerability remediation. You have found and fixed security flaws in large production systems and can prioritize a remediation backlog.

  • Security fundamentals. Strong security knowledge across systems, networks, cloud, and identity, and a track record of applying it to real systems. Experienced in designing secure software and cloud architectures.

  • Code review. Reviewing and giving constructive security feedback on PRs, including from the FOSS community.

    •  

Nice to haves

  • Detection engineering at scale: Experience with detection pipelines (DataDog SIEM, AWS SecurityHub), writing and tuning detections, and threat hunting. 

  • Offensive security: Experience with red teaming, penetration testing, and/or vulnerability research.

  • AI/LLM engineering: You build with AI: agent pipelines, LLM-powered tooling, automated workflows, and understand current limitations of those tools.

  • AI security research: Familiarity with agent control, hardware security, or red teaming AI systems themselves.

    •  

    Ideally you have experience with a portion of these technologies:

  • AWS: cloud-native software platforms

  • EKS

  • Lambda

  • ECS

  • IAM (in-depth)

  • CloudWatch

  • SecurityHub & GuardDuty

  • PostgreSQL: RLS, serverless Aurora

  • Pulumi: IaC

  • DataDog: SIEM

  • Okta: IdP

  • Google Workspace: IdP

  • Tailscale: networking

  • CrowdStrike Falcon: endpoint security

    •  

Our Culture
 
METR is a mission-driven organization. We believe our work can meaningfully shape humanity's future for the better, and we want to be the best people in the world doing this work. We have a tight-knit, collaborative research culture rooted in truth-seeking and integrity. We're fiercely committed to producing high-quality, trustworthy science. We're honest and transparent about our results, especially when they may go against the grain. We've earned trust as reliable partners who handle confidential information with care. We maintain a low-ego, drama-free environment focused on what matters.
 
Hybrid Requirements: Our technical team members are in our office in Berkeley 3-5 days/week. Please let us know in your application if this is a constraint. If you lack US work authorization and would like to work in-person (strongly preferred), we can likely sponsor a cap-exempt H-1B visa for this role.
 
We encourage you to apply even if your background may not seem like the perfect fit! We would rather review a larger pool of applications than risk missing out on a promising candidate for the position.
 
We are committed to diversity and equal opportunity in all aspects of our hiring process. We do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We welcome and encourage all qualified candidates to apply for our open positions.

Frequently Asked Questions

What is the salary for the Platform Engineer, Application Security role at metr?
The listed salary for this Platform Engineer, Application Security position at metr is USD 328K–579K. This is an Employee role.
Where is the Platform Engineer, Application Security position at metr located?
This Platform Engineer, Application Security role at metr is based in Berkeley. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Is the Platform Engineer, Application Security role at metr full-time or part-time?
This is listed as a Employee position. It is posted as a Platform Engineer, Application Security role in the Engineering & Research department at metr.
Which team or department does the Platform Engineer, Application Security at metr belong to?
This Platform Engineer, Application Security position is part of the Engineering & Research department at metr. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Platform Engineer, Application Security position at metr?
Click the "Apply Now" button on this page. You will be redirected to metr's official application portal hosted on lever where you can submit your application directly.
When was the Platform Engineer, Application Security job at metr posted?
This Platform Engineer, Application Security position at metr was posted on Jul 8, 2026. Apply as soon as possible — early applications are often reviewed first.
Platform Engineer, Application Security
metr · 💰 USD 328K–579K
Apply for this role ↗

You'll be redirected to metr's official application page on Lever.